Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
zeek/src
History
Arne Welzel 33acfdc630 quic: Continue decryption attempts for later INITIAL packets 
The original logic stopped decrypting any INITIAL packets after the
first. The Firefox/cloudflare pcaps actually show that the server
replies with a QUIC INITAL packet containing just ACK frames and no
CRYPTO frames. Only the second QUIC INITIAL packet from the server
then contains the CRYPTO frames.

There's no good reason to stop decryption attempts, either we succeed
down the road and then stop, or we fail and raise analyzer violations.
2024-01-30 21:46:38 +01:00
..
3rdparty@06d7496bfa Update src/3rdparty submodule to fix sprintf warning in modp 2024-01-08 13:26:57 -07:00
analyzer quic: Continue decryption attempts for later INITIAL packets 2024-01-30 21:46:38 +01:00
broker Prepare Broker manager for broker::variant 2024-01-24 15:13:56 -08:00
file_analysis Integrate review feedback 2024-01-06 13:48:14 +01:00
fuzzers fuzzers: Add WebSocket fuzzer 2024-01-22 18:54:38 +01:00
include Creating a symlink src/include/zeek -> src/ 2022-11-09 18:16:13 +02:00
input Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
iosource iosource: Specify libkqueue dependency for subdir lib 2023-12-06 16:00:00 +01:00
logging Integrate review feedback 2024-01-06 13:48:14 +01:00
packet_analysis Remove setting non-existent session history for IPTunnel 2024-01-23 12:39:58 -07:00
plugin Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
probabilistic Integrate review feedback 2024-01-06 13:48:14 +01:00
script_opt ZAM optimizations for record creation 2024-01-25 20:49:12 +01:00
session Session/Conn: Follow-up fix for hist_seen and history lift 2024-01-12 12:24:27 +01:00
spicy Audit creation of temporary strings in Spicy bindings 2023-12-08 16:50:33 +01:00
supervisor Use std::move in return values from bif methods to avoid copies 2024-01-10 12:32:15 -07:00
telemetry Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
threading Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
zeekygen Bind scan_path to the scope; avoid heap allocation 2023-11-11 16:39:22 +01:00
Anon.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Anon.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Attr.cc Fix warning with attribute string lookup 2024-01-08 13:25:08 -07:00
Attr.h minor fixes for script optimization, exporting of attr_name, script layout tweak 2023-12-04 16:48:19 -08:00
Base64.cc Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
Base64.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
binpac-lib.pac Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
binpac.pac
binpac_zeek-lib.pac Spelling src 2022-11-09 12:08:15 -05:00
binpac_zeek.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CCL.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CCL.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CMakeLists.txt Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
communityid.bif Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
CompHash.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CompHash.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Conn.cc Session/Conn: Follow-up fix for hist_seen and history lift 2024-01-12 12:24:27 +01:00
Conn.h Conn: Deprecated AppendAddl 2024-01-11 10:22:44 +01:00
const.bif Remove deprecations tagged for v6.1 2023-06-14 10:07:22 -07:00
DbgBreakpoint.cc Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
DbgBreakpoint.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgDisplay.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgHelp.cc updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
DbgWatch.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgWatch.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Debug.cc Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
Debug.h Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
DebugCmdInfoConstants.in Merge remote-tracking branch 'microsoft/master' 2022-11-11 15:23:21 -07:00
DebugCmds.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DebugCmds.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DebugLogger.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DebugLogger.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Desc.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Desc.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DFA.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DFA.h DFA: Extract inner Stats struct from DFA_State_Cache 2023-11-21 10:34:17 +01:00
Dict.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Dict.h Dict: Invalidate iterators during Clear() 2024-01-09 09:12:21 +01:00
digest.cc Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
digest.h Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
Discard.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Discard.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mapping.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mapping.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mgr.cc Use <poll.h> instead of <sys/poll.h> 2024-01-08 13:26:57 -07:00
DNS_Mgr.h Change function return types to more concise types where possible 2023-11-28 13:40:28 -07:00
EquivClass.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
EquivClass.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
event.bif Fix a zeek_init -> zeek_done confusion in a docstring [skip ci] 2024-01-18 16:14:33 -08:00
Event.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Event.h EventMgr: Remove queue_flare, use GetNextTimeout() instead 2023-12-04 20:03:31 +01:00
EventHandler.cc Add facade types to avoid using raw Broker types 2023-12-04 15:23:28 +01:00
EventHandler.h EventHandler: Deprecate SetUsed() and Used() as well. 2023-11-07 16:06:35 +01:00
EventLauncher.cc Minor fixes for build problems after reformatting 2021-09-16 15:36:09 -07:00
EventLauncher.h Minor fixes for build problems after reformatting 2021-09-16 15:36:09 -07:00
EventRegistry.cc Merge remote-tracking branch 'origin/topic/vern/zam-EH-coalesce' 2023-11-17 18:05:32 +01:00
EventRegistry.h EventRegistry: Deprecate UsedHandlers() and UnusedHandlers() 2023-11-07 16:06:17 +01:00
EventTrace.cc Avoid creating a few temporary values to avoid copy operations 2023-11-28 13:40:28 -07:00
EventTrace.h Add some uses of std::move in constructors and simple functions for pass-by-value arguments 2023-11-28 13:40:28 -07:00
Expr.cc Add some uses of std::move in constructors and simple functions for pass-by-value arguments 2023-11-28 13:40:28 -07:00
Expr.h ZAM speedup for constructing empty vectors 2024-01-15 15:03:56 +01:00
File.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
File.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Flare.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Flare.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frag.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frag.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frame.cc Add facade types to avoid using raw Broker types 2023-12-04 15:23:28 +01:00
Frame.h Add facade types to avoid using raw Broker types 2023-12-04 15:23:28 +01:00
Func.cc Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
Func.h Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
Hash.cc Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
Hash.h Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
ID.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ID.h allow explicitly marking an identifier as equivalent to special '_' identifier 2023-11-10 09:56:59 +01:00
input.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntrusivePtr.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntSet.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntSet.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IP.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IP.h Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
IPAddr.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IPAddr.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
List.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
List.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
main.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
make_dbg_constants.py Format Python scripts with yapf. 2021-11-24 23:13:24 +01:00
mmdb.bif Modernize various C++/Zeek-isms in the MMDB code. 2024-01-11 17:13:41 -08:00
MMDB.cc Fix MMDB::Lookup() to check result status correctly 2024-01-25 23:54:22 -08:00
MMDB.h Modernize various C++/Zeek-isms in the MMDB code. 2024-01-11 17:13:41 -08:00
module_util.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
module_util.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
net_util.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
net_util.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
NetVar.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
NetVar.h segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
NFA.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
NFA.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Notifier.cc fix for Trigger's whose termination leads to deleting other Trigger's 2023-12-12 09:45:19 +01:00
Notifier.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Obj.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Obj.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
OpaqueVal.cc Backward compatibility for OpaqueVal serialization 2024-01-06 10:52:06 +01:00
OpaqueVal.h Document upcoming breaking change for OpaqueVal 2024-01-11 09:02:49 +01:00
option.bif option.bif: Short-circuit option changes when terminating 2022-07-29 18:22:03 +02:00
Options.cc added "-O noinline" option to turn off ZAM inlining, to help with diagnosing optimization problems 2023-11-10 09:57:35 +01:00
Options.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Overflow.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Overflow.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PacketFilter.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PacketFilter.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
parse.y parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
Pipe.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Pipe.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PolicyFile.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PolicyFile.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PrefixTable.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PrefixTable.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PriorityQueue.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PriorityQueue.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RandTest.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RandTest.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
re-parse.y Reuse CompileSet() instead of || string formatting 2023-11-21 10:34:16 +01:00
re-scan.l Reuse CompileSet() instead of || string formatting 2023-11-21 10:34:16 +01:00
RE.cc RE: Remove RE_DisjunctiveMatcher and re-use MatchAll() 2023-11-21 10:34:16 +01:00
RE.h RE: Remove RE_DisjunctiveMatcher and re-use MatchAll() 2023-11-21 10:34:16 +01:00
Reassem.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Reassem.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
reporter.bif Use std::move in return values from bif methods to avoid copies 2024-01-10 12:32:15 -07:00
Reporter.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Reporter.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
rule-parse.y rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
rule-scan.l rule-scan: Copy yytext strings 2023-12-05 15:26:40 +01:00
Rule.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Rule.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleAction.cc rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
RuleAction.h rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
RuleCondition.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleCondition.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleMatcher.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleMatcher.h Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
RunState.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
RunState.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
scan.l Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
ScannedFile.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScannedFile.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Scope.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Scope.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptCoverageManager.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptCoverageManager.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptProfile.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptProfile.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptValidation.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptValidation.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SerializationFormat.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SerializationFormat.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SmithWaterman.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SmithWaterman.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Span.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
stats.bif Use std::move in return values from bif methods to avoid copies 2024-01-10 12:32:15 -07:00
Stats.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Stats.h segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Stmt.cc greater ZAM optimization of inlined function calls 2023-11-10 09:57:35 +01:00
Stmt.h new method for Stmt nodes to report whether they could execute a "return" 2023-12-04 16:53:32 -08:00
StmtBase.h new method for Stmt nodes to report whether they could execute a "return" 2023-12-04 16:53:32 -08:00
StmtEnums.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
strings.bif Change to use ToStdStringView() in a few other BIFs 2024-01-23 10:38:56 -07:00
Tag.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Tag.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Timer.cc Timer: Add LOG_DELAY_EXPIRE timer type 2023-11-29 11:53:11 +01:00
Timer.h Timer: Add LOG_DELAY_EXPIRE timer type 2023-11-29 11:53:11 +01:00
Traverse.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Traverse.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
TraverseTypes.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Trigger.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Trigger.h fix for Trigger's whose termination leads to deleting other Trigger's 2023-12-12 09:45:19 +01:00
TunnelEncapsulation.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
TunnelEncapsulation.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Type.cc ZAM optimizations for record creation 2024-01-25 20:49:12 +01:00
Type.h ZAM optimizations for record creation 2024-01-25 20:49:12 +01:00
types.bif Pass parsed file record information with ReadFile/WriteFile events 2023-08-07 13:44:38 -07:00
UID.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
UID.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
util.cc Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
util.h Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
Val.cc ZAM optimizations for record creation 2024-01-25 20:49:12 +01:00
Val.h ZAM optimizations for record creation 2024-01-25 20:49:12 +01:00
Var.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Var.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
version.c.in Change VERSION variable in CMake config to ZEEK_VERSION_FULL 2023-08-07 09:33:52 -07:00
WeirdState.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
WeirdState.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-affinity.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-affinity.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-bif.h Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
zeek-setup.cc Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
zeek-setup.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek.bif Change to use ToStdStringView() in a few other BIFs 2024-01-23 10:38:56 -07:00
zeek.pac Add GTPv1 packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00
ZeekArgs.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekArgs.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekConfig.cmake.in Revert "Merge remote-tracking branch 'origin/topic/neverlord/gh-3247'" 2023-08-29 12:13:40 -07:00
ZeekList.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekPluginBootstrap.cmake.in ZeekPluginBootstrap: Encode Zeek's CMAKE_BUILD_TYPE 2023-06-15 10:46:06 +02:00
ZeekPluginConfig.cmake.in Fix install directory for plugins 2023-04-22 16:12:22 +02:00
ZeekString.cc Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
ZeekString.h Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
ZVal.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZVal.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00